EUVD-2025-210926
GHSA-xvhf-gc4w-vcvc
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local memory corruption reachable by a low-privilege on-device process with no user interaction, giving full C/I/A impact within an unchanged scope; matches the vendor vector.
Primary rating from Vendor (qualcomm).
CVSS VectorVendor: qualcomm
Lifecycle Timeline
3DescriptionCVE.org
Memory Corruption when copying large input data exceeds normal allocation limits.
AnalysisAI
Memory corruption in Qualcomm Snapdragon platforms allows an attacker who already holds a low-privileged local foothold on the device to corrupt memory by feeding oversized input into a copy routine that exceeds expected allocation limits, giving high impact to confidentiality, integrity, and availability of the affected component. The flaw is not remotely exploitable on its own: exploitation requires local access with low privileges (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 7.8) - for example a malicious or compromised application able to reach the vulnerable code path - and no user interaction is needed. No public exploit code has been identified at time of analysis, and no CISA KEV listing or EPSS score was provided; the referenced Qualcomm September 2026 security bulletin is the authoritative source for the specific affected chipsets and fixed versions.
Technical ContextAI
This is a memory-corruption defect in Qualcomm Snapdragon platform code, classified under CWE-822 (Untrusted Pointer Dereference) and tagged as a buffer overflow. The root cause class is a copy operation that trusts an input size or pointer derived from attacker-controlled data, so when a larger-than-expected input is copied the destination allocation or an associated pointer is exceeded, corrupting adjacent memory. Such corruption in a low-level component can be steered toward arbitrary read/write primitives within the component's privilege context, which is why the assessed vector assigns high (C:H/I:H/A:H) rather than partial impact. The CPE entry (cpe:2.3:a:qualcomm,_inc.:snapdragon:*:*:*:*:*:*:*:*) identifies the Snapdragon product family broadly but carries a wildcard version, so the precise silicon, subsystem, and firmware component are not enumerated in the supplied data and must be taken from the Qualcomm September 2026 security bulletin. Qualcomm is the upstream reporter and vendor here, meaning fixes are delivered into device OEM/carrier firmware rather than by the end user directly; the local attack vector (AV:L) and low-privilege prerequisite (PR:L) mean the vulnerable copy path must be reachable from an already-compromised application or lower-privileged context, not from the network.
RemediationAI
No exact fixed version was supplied with this record, so patch availability is not independently confirmed from the provided data; the authoritative source is the Qualcomm security bulletin for September 2026 at https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2026-bulletin.html, which lists the affected Snapdragon components and the corresponding fix. Because Qualcomm is an upstream silicon vendor, remediation flows to device owners as OEM or carrier firmware/security updates - track and apply the Android/device security patch level that incorporates the Qualcomm fix, and for managed fleets enforce a minimum patch level through MDM. Where a patch cannot yet be applied, compensating controls should target the AV:L/PR:L prerequisite: restrict the device to trusted application sources and block sideloading so a malicious app cannot obtain the low-privileged local foothold the flaw requires (trade-off: reduced flexibility for power users and internal app distribution), constrain high-risk or debug interfaces and developer options on production devices (trade-off: some developer and diagnostic workflows break), and use enterprise mobility management to detect and remove untrusted or sideloaded packages (trade-off: added management overhead and possible false positives). None of these controls remove the underlying memory-corruption defect, and they should be treated as interim measures until the vendor firmware update is installed.
More in Snapdragon
View allMemory corruption in Qualcomm Snapdragon Wi-Fi/NAN firmware allows an attacker within wireless range to overflow a stack
Buffer overflow in Qualcomm Snapdragon firmware enables authentication bypass on adjacent networks, allowing remote unau
Local privilege escalation and memory corruption in Qualcomm Snapdragon WLAN firmware occurs when the driver parses malf
Memory corruption in Qualcomm Snapdragon Strongbox component allows local low-privileged attackers to trigger a buffer o
Local privilege escalation in Qualcomm Snapdragon chipsets stems from an out-of-bounds memory access in the Strongbox tr
Memory corruption in Qualcomm Snapdragon chipsets allows adjacent network attackers to achieve arbitrary code execution
Stack-based memory corruption in Qualcomm Snapdragon firmware allows a locally-resident, low-privileged process to overf
Bootloader integrity bypass in Qualcomm Snapdragon platforms allows a high-privileged local attacker to write to a speci
Authentication bypass in Qualcomm Snapdragon SoCs allows adjacent network attackers to exploit a cryptographic flaw duri
Out-of-bounds memory access in Qualcomm Snapdragon platform firmware allows a locally authenticated low-privileged attac
Memory corruption in Qualcomm Snapdragon IOCTL device driver handling enables a local low-privilege attacker to achieve
Memory corruption in Qualcomm Snapdragon's fingerprint Trusted Application (TA) allows a local low-privileged attacker t
Same weakness CWE-822 – Untrusted Pointer Dereference
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today